--- loncom/loncapa_apache.conf 2003/09/16 18:29:23 1.59.2.2 +++ loncom/loncapa_apache.conf 2004/10/26 17:20:08 1.99 @@ -1,7 +1,7 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa_apache.conf,v 1.59.2.2 2003/09/16 18:29:23 albertel Exp $ +## $Id: loncapa_apache.conf,v 1.99 2004/10/26 17:20:08 www Exp $ ## # @@ -23,6 +23,9 @@ LoadModule perl_module modules/lib AddModule mod_perl.c + +PerlSetVar MODPERL2 1 + # =============================================================== Miscellaneous ServerAdmin korte@lite.msu.edu @@ -40,6 +43,7 @@ ScriptAlias /cgi-bin/ "/home/httpd/cgi-b # ------------------------------------------------------------- Access Handlers PerlTransHandler Apache::lontrans +PerlCleanupHandler Apache::lonnet::save_cache #PerlWarn On @@ -51,17 +55,56 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonenc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::portfolio + + + +SetHandler perl-script +PerlHandler Apache::portfolio + + + + PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile -PerlAccessHandler Apache::lonuploadedacc +PerlAccessHandler Apache::lonacc +PerlHeaderParserHandler Apache::lonuploadrep +ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonuploadedacc + + + + +SetHandler perl-script +PerlHandler Apache::lonpage + + + +SetHandler perl-script +PerlHandler Apache::lonsequence + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -91,6 +134,7 @@ ErrorDocument 500 /adm/errorhandler PerlAccessHandler Apache::lonacc SetHandler perl-script +PerlHandler Apache::londatecheck PerlHandler Apache::lonbulletin ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html @@ -144,6 +188,7 @@ PerlAccessHandler Apache::lonacc ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler # ------------------------------------------------------------------------- RAT @@ -184,28 +229,38 @@ SetHandler perl-script PerlHandler Apache::lontex - + SetHandler perl-script PerlHandler Apache::lonpage - + SetHandler perl-script PerlHandler Apache::lonsequence - + SetHandler perl-script PerlHandler Apache::lonmeta +ErrorDocument 413 /adm/overloaded.txt - + +SetHandler perl-script +PerlAccessHandler Apache::lonacc +PerlHandler Apache::lonmeta + + + + + SetHandler perl-script PerlHandler Apache::lonrights - + SetHandler perl-script +PerlHandler Apache::londatecheck PerlHandler Apache::lonxml @@ -222,6 +277,24 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsource +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonlocal +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + # -------------------------------------------------------------- Admin Programs @@ -232,6 +305,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imagechoice +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -241,6 +322,15 @@ ErrorDocument 413 /adm/overloaded.tx ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lontrackstudent +ErrorDocument 403 /adm/login +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -281,6 +371,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickcode +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonlogin @@ -306,6 +404,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonspeller +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -377,6 +483,15 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonmodifycourse +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -465,6 +580,26 @@ ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imsimport +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::testbankimport +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -504,6 +639,24 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonviewclasslist +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpopulate +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -533,12 +686,20 @@ ErrorDocument 500 /adm/errorhandler PerlAccessHandler Apache::lonacc SetHandler perl-script -PerlCleanupHandler Apache::londocs::untiehash PerlHandler Apache::londocs + PerlCleanupHandler Apache::londocs::untiehash ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imsimportdocs +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -638,10 +799,23 @@ PerlHandler Apache::lonerrorhandler +PerlAccessHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonhelp + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonhelpmenu + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsupportreq + + # ------------------------------------------------- Backdoor Adm Tests/Programs @@ -686,6 +860,20 @@ AuthUserFile /home/httpd/lonTabs/htpassw require user reaper + +AuthName "Offline" +AuthType Basic +AuthUserFile /home/httpd/lonTabs/htpasswd +require user offline + + + +AuthName "Offline" +AuthType Basic +AuthUserFile /home/httpd/lonTabs/htpasswd +require user offline + + AuthName "LON-CAPA Network Administration" AuthType Basic @@ -769,11 +957,14 @@ PerlSetVar lonSysEMail korte@lite PerlSetVar lonDaemons /home/httpd/perl PerlSetVar lonSockDir /home/httpd/sockets PerlSetVar lonDocRoot /home/httpd/html +PerlSetVar lonPrtDir /home/httpd/prtspool PerlSetVar lonIncludes /home/httpd/html/res/adm/includes -PerlSetVar lonBrowsDet netscape:mozilla:msie:mozilla\/(\d+\.\d+)\s:9999:9999&explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1 +PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/(\d+\.\d+):9999:9999 PerlSetVar lonTextBrowsers opera:windows\s+ce:lynx PerlSetVar lonScansDir /home/httpd/scantron PerlSetVar lonScriptTimeout 10 +PerlSetVar BugzillaHost http://bugs.lon-capa.org/ +PerlSetVar FAQHost http://help.lon-capa.org/ # ----------------------------------------------------------------------------- # NOTE: lonSqlAccess key is the password for the MySQL user # www@localhost. This value must always be "localhostkey". @@ -789,6 +980,77 @@ PerlSetVar lonSqlAccess localhos PerlSetVar lonhttpdPort 8080 +#---------------------------------------------------------------------------- +# +# Parameters used by secure lond/lonc + +# +# Secure lond/lonc require ssl certificate and private +# key files to function correctly. The certificate +# files need not be terribly secure, but the private key files +# should be set up so that only www (the lonc/lond effective user) +# can read them. +# +# The definition below is the full path to the directory that +# contains the certificate and key files: + +PerlSetVar lonCertificateDirectory /home/httpd/lonCerts + +# +# Secure lond/lonc require two certificates and a private host key. +# The certificates required are that of the lonCAPA certificate authority +# and the certificate that authority issued to this host. +# lonnetCertificateAuthority is the name of the file that contains the +# lonCAPA certificate authority's certificate. +# lonnetCertificate is the name of the file that contains the certificate +# issued to the host by the certificate authority. +# Both of these variables are names of files assumed to be in +# lonCertificateDirectory: + +PerlSetVar lonnetCertificateAuthority loncapaCA.pem +PerlSetVar lonnetCertificate lonhostcert.pem + +# +# To generate the request for a certificate, and to negotiate the +# initial ssl connection, the host requires a private key. This key +# is created at lonCAPA install time. Did we mention above that it +# should be set so that only www can read it? The variale below +# is the name of the file relative to lonnetCertificateDirectory +# that has the host's private key. Did we remember to tell you to +# keep the permissions on that file set to rw------- (0600)? +# + +PerlSetVar lonnetPrivateKey lonKey.pem + +# Did we mention that the file described above must have +# permissions really locked down so that it can't be stolen? + +#------------------------------------------------------------------------- + +# Parameters that define where all the ssl stuff is that's needed +# to generate certificate requests and, on a system that's a CA +# the certificate authority. +# +# SSLProgram -> Path to the openssl command +# SSLDirectory -> Directory containing ssl configuration files etc. +# SSLCAConfig -> Name of the SSL config file for the certificate +# Authority. +# SSLCAFile -> Full path to the Certificate authority file +# (on the cert manager system). +# SSLEmail -> E-mail address of loncapa certificate manager. +# The following are good for the loncapa redhat installs and +# the loncapa certificate authority system: +# +PerlSetVar SSLProgram /usr/bin/openssl +PerlSetVar SSLDirectory /usr/share/ssl +PerlSetVar SSLCAConfig loncapaca +PerlSetVar SSLCAFile /usr/share/ssl/loncapaca/cacert.pem +PerlSetVar SSLEmail certificate@lon-capa.org + +#------------------------------------------------------------------------- + + + # ====================================== Include machine-specific configuration